1. Who is responsible
The data controller is the operator of this website. For any question about privacy, use the contact form.
2. Free service, no account
This service is completely free and requires no account or registration. Because there is no payment, we do not process bank, card or billing data. The service is funded by discreet advertising (see “Cookies and local storage”).
3. What data we process, why and for how long
- Images you upload. They are processed on the server only to compress them. The original file is not stored. The result is available at a random, unlisted address for 30 days so you can download it again — you can delete it immediately with the × button (or “Clear”). EXIF metadata (including GPS location) is removed from the result. Legal basis: legitimate interest in providing the free service you request (Art. 6(1)(f) GDPR) — you can object at any time by no longer using the service or by deleting the file with the × button.
- IP address. Used only to limit abuse (compressions per hour) and for security. We do not store your IP: we keep only an irreversible code (hash) for 1 hour. Legal basis: legitimate interest in keeping the service secure and available (Art. 6(1)(f)).
- Usage statistics. Aggregate counts (number of compressions, formats, sizes, pages and languages), without identifying anyone and without storing file names, kept for up to 90 days. Legal basis: legitimate interest in improving the service.
- Contact form. Name, email, subject and message, used only to reply to your request. We also keep your anonymised IP and browser for 30 days to prevent abuse. The message is deleted after 365 days. Legal basis: legitimate interest in replying to you (Art. 6(1)(f)).
- Server logs. The hosting provider keeps technical access logs for security reasons, for the period it defines.
4. Cookies and local storage
This site does not use advertising or analytics cookies without your consent. We use a technical cookie (lang) to remember your language, and your browser's local storage to remember your cookie choice.
If you accept, Google AdSense ads may be loaded, which use Google's own cookies and identifiers. If you decline, those ads are not loaded and the service works exactly the same. You can change your mind at any time via “Cookie preferences” in the footer. Direct partner ads do not use cookies.
5. Who we share data with
We do not sell or hand over your data. We use a hosting provider (processor) to run the server. If you accept Google ads, Google acts as an independent controller for the data it collects and may transfer it outside the European Economic Area with the safeguards provided by the GDPR.
6. Your rights
You have the right of access, rectification, erasure, restriction, objection and portability, and the right to withdraw consent at any time (without affecting prior processing). To exercise them, write to contact form. We reply within one month. You may also lodge a complaint with the Portuguese data protection authority, the CNPD (cnpd.pt).
7. Security
The connection is encrypted (HTTPS); compressed files are stored at random, unlisted addresses; access to the administration area is restricted; data is deleted automatically within the periods above.
8. Children
The service is not intended for children under 16. If you believe a child has sent us personal data, contact us and we will delete it.
9. Changes
We may update this policy. The date of the last update is shown at the top of this page.